@openhi/constructs 0.0.48 → 0.0.50

package/lib/pre-token-generation.handler.js

@@ -24,10 +24,10 @@ __export(pre_token_generation_handler_exports, {
 });
 module.exports = __toCommonJS(pre_token_generation_handler_exports);
 var OPENHI_CLAIMS = {
-  openhi_tenant_id: "placeholder-tenant-id",
-  openhi_workspace_id: "placeholder-workspace-id",
-  openhi_user_id: "placeholder-user-id",
-  openhi_user_name: "placeholder"
+  ohi_tid: "placeholder-tenant-id",
+  ohi_wid: "placeholder-workspace-id",
+  ohi_uid: "placeholder-user-id",
+  ohi_uname: "placeholder"
 };
 var handler = async (event, _context) => {
   console.debug(`Raw event=${event}`);

package/lib/pre-token-generation.handler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/components/cognito/pre-token-generation.handler.ts"],"sourcesContent":["import type {\n  Context,\n  PreTokenGenerationTriggerEvent,\n  PreTokenGenerationTriggerHandler,\n} from \"aws-lambda\";\n\n/* Hardcoded OpenHI claims. These will be made dynamic in a future update. */\nconst OPENHI_CLAIMS = {\n  openhi_tenant_id: \"placeholder-tenant-id\",\n  openhi_workspace_id: \"placeholder-workspace-id\",\n  openhi_user_id: \"placeholder-user-id\",\n  openhi_user_name: \"placeholder\",\n} as const;\n\n/**\n * @see sites/www-docs/content/packages/@openhi/constructs/components/cognito/pre-token-generation-lambda.md\n *\n * Cognito Pre Token Generation trigger (V2_0).\n * Adds openhi_* claims to both the ID token and the access token. Invoked on sign-in and token refresh.\n * Token issuance must not fail: on error we return the event unchanged.\n */\nexport const handler: PreTokenGenerationTriggerHandler = async (\n  event: PreTokenGenerationTriggerEvent,\n  _context: Context,\n): Promise<PreTokenGenerationTriggerEvent> => {\n  console.debug(`Raw event=${event}`);\n  try {\n    if (!event.response) {\n      (event as { response: Record<string, unknown> }).response = {};\n    }\n    const response = event.response as Record<string, unknown>;\n    const claimsToAdd = { ...OPENHI_CLAIMS };\n    response.claimsAndScopeOverrideDetails = {\n      accessTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n      idTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n    };\n  } catch {\n    // Do not fail token issuance; return event unchanged.\n    console.warn(\"Event is missing tenant or workspace ID...\");\n  }\n  return event;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,IAAM,gBAAgB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,kBAAkB;AACpB;AASO,IAAM,UAA4C,OACvD,OACA,aAC4C;AAC5C,UAAQ,MAAM,aAAa,KAAK,EAAE;AAClC,MAAI;AACF,QAAI,CAAC,MAAM,UAAU;AACnB,MAAC,MAAgD,WAAW,CAAC;AAAA,IAC/D;AACA,UAAM,WAAW,MAAM;AACvB,UAAM,cAAc,EAAE,GAAG,cAAc;AACvC,aAAS,gCAAgC;AAAA,MACvC,uBAAuB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,MACA,mBAAmB;AAAA,QACjB,uBAAuB;AAAA,MACzB;AAAA,IACF;AAAA,EACF,QAAQ;AAEN,YAAQ,KAAK,4CAA4C;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/components/cognito/pre-token-generation.handler.ts"],"sourcesContent":["import type {\n  Context,\n  PreTokenGenerationTriggerEvent,\n  PreTokenGenerationTriggerHandler,\n} from \"aws-lambda\";\n\n/* Hardcoded OpenHI claims. These will be made dynamic in a future update. */\nconst OPENHI_CLAIMS = {\n  ohi_tid: \"placeholder-tenant-id\",\n  ohi_wid: \"placeholder-workspace-id\",\n  ohi_uid: \"placeholder-user-id\",\n  ohi_uname: \"placeholder\",\n} as const;\n\n/**\n * @see sites/www-docs/content/packages/@openhi/constructs/components/cognito/pre-token-generation-lambda.md\n *\n * Cognito Pre Token Generation trigger (V2_0).\n * Adds openhi_* claims to both the ID token and the access token. Invoked on sign-in and token refresh.\n * Token issuance must not fail: on error we return the event unchanged.\n */\nexport const handler: PreTokenGenerationTriggerHandler = async (\n  event: PreTokenGenerationTriggerEvent,\n  _context: Context,\n): Promise<PreTokenGenerationTriggerEvent> => {\n  console.debug(`Raw event=${event}`);\n  try {\n    if (!event.response) {\n      (event as { response: Record<string, unknown> }).response = {};\n    }\n    const response = event.response as Record<string, unknown>;\n    const claimsToAdd = { ...OPENHI_CLAIMS };\n    response.claimsAndScopeOverrideDetails = {\n      accessTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n      idTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n    };\n  } catch {\n    // Do not fail token issuance; return event unchanged.\n    console.warn(\"Event is missing tenant or workspace ID...\");\n  }\n  return event;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,IAAM,gBAAgB;AAAA,EACpB,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AACb;AASO,IAAM,UAA4C,OACvD,OACA,aAC4C;AAC5C,UAAQ,MAAM,aAAa,KAAK,EAAE;AAClC,MAAI;AACF,QAAI,CAAC,MAAM,UAAU;AACnB,MAAC,MAAgD,WAAW,CAAC;AAAA,IAC/D;AACA,UAAM,WAAW,MAAM;AACvB,UAAM,cAAc,EAAE,GAAG,cAAc;AACvC,aAAS,gCAAgC;AAAA,MACvC,uBAAuB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,MACA,mBAAmB;AAAA,QACjB,uBAAuB;AAAA,MACzB;AAAA,IACF;AAAA,EACF,QAAQ;AAEN,YAAQ,KAAK,4CAA4C;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}

package/lib/pre-token-generation.handler.mjs

@@ -2,10 +2,10 @@ import "./chunk-LZOMFHX3.mjs";
 
 // src/components/cognito/pre-token-generation.handler.ts
 var OPENHI_CLAIMS = {
-  openhi_tenant_id: "placeholder-tenant-id",
-  openhi_workspace_id: "placeholder-workspace-id",
-  openhi_user_id: "placeholder-user-id",
-  openhi_user_name: "placeholder"
+  ohi_tid: "placeholder-tenant-id",
+  ohi_wid: "placeholder-workspace-id",
+  ohi_uid: "placeholder-user-id",
+  ohi_uname: "placeholder"
 };
 var handler = async (event, _context) => {
   console.debug(`Raw event=${event}`);

package/lib/pre-token-generation.handler.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/components/cognito/pre-token-generation.handler.ts"],"sourcesContent":["import type {\n  Context,\n  PreTokenGenerationTriggerEvent,\n  PreTokenGenerationTriggerHandler,\n} from \"aws-lambda\";\n\n/* Hardcoded OpenHI claims. These will be made dynamic in a future update. */\nconst OPENHI_CLAIMS = {\n  openhi_tenant_id: \"placeholder-tenant-id\",\n  openhi_workspace_id: \"placeholder-workspace-id\",\n  openhi_user_id: \"placeholder-user-id\",\n  openhi_user_name: \"placeholder\",\n} as const;\n\n/**\n * @see sites/www-docs/content/packages/@openhi/constructs/components/cognito/pre-token-generation-lambda.md\n *\n * Cognito Pre Token Generation trigger (V2_0).\n * Adds openhi_* claims to both the ID token and the access token. Invoked on sign-in and token refresh.\n * Token issuance must not fail: on error we return the event unchanged.\n */\nexport const handler: PreTokenGenerationTriggerHandler = async (\n  event: PreTokenGenerationTriggerEvent,\n  _context: Context,\n): Promise<PreTokenGenerationTriggerEvent> => {\n  console.debug(`Raw event=${event}`);\n  try {\n    if (!event.response) {\n      (event as { response: Record<string, unknown> }).response = {};\n    }\n    const response = event.response as Record<string, unknown>;\n    const claimsToAdd = { ...OPENHI_CLAIMS };\n    response.claimsAndScopeOverrideDetails = {\n      accessTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n      idTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n    };\n  } catch {\n    // Do not fail token issuance; return event unchanged.\n    console.warn(\"Event is missing tenant or workspace ID...\");\n  }\n  return event;\n};\n"],"mappings":";;;AAOA,IAAM,gBAAgB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,kBAAkB;AACpB;AASO,IAAM,UAA4C,OACvD,OACA,aAC4C;AAC5C,UAAQ,MAAM,aAAa,KAAK,EAAE;AAClC,MAAI;AACF,QAAI,CAAC,MAAM,UAAU;AACnB,MAAC,MAAgD,WAAW,CAAC;AAAA,IAC/D;AACA,UAAM,WAAW,MAAM;AACvB,UAAM,cAAc,EAAE,GAAG,cAAc;AACvC,aAAS,gCAAgC;AAAA,MACvC,uBAAuB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,MACA,mBAAmB;AAAA,QACjB,uBAAuB;AAAA,MACzB;AAAA,IACF;AAAA,EACF,QAAQ;AAEN,YAAQ,KAAK,4CAA4C;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/components/cognito/pre-token-generation.handler.ts"],"sourcesContent":["import type {\n  Context,\n  PreTokenGenerationTriggerEvent,\n  PreTokenGenerationTriggerHandler,\n} from \"aws-lambda\";\n\n/* Hardcoded OpenHI claims. These will be made dynamic in a future update. */\nconst OPENHI_CLAIMS = {\n  ohi_tid: \"placeholder-tenant-id\",\n  ohi_wid: \"placeholder-workspace-id\",\n  ohi_uid: \"placeholder-user-id\",\n  ohi_uname: \"placeholder\",\n} as const;\n\n/**\n * @see sites/www-docs/content/packages/@openhi/constructs/components/cognito/pre-token-generation-lambda.md\n *\n * Cognito Pre Token Generation trigger (V2_0).\n * Adds openhi_* claims to both the ID token and the access token. Invoked on sign-in and token refresh.\n * Token issuance must not fail: on error we return the event unchanged.\n */\nexport const handler: PreTokenGenerationTriggerHandler = async (\n  event: PreTokenGenerationTriggerEvent,\n  _context: Context,\n): Promise<PreTokenGenerationTriggerEvent> => {\n  console.debug(`Raw event=${event}`);\n  try {\n    if (!event.response) {\n      (event as { response: Record<string, unknown> }).response = {};\n    }\n    const response = event.response as Record<string, unknown>;\n    const claimsToAdd = { ...OPENHI_CLAIMS };\n    response.claimsAndScopeOverrideDetails = {\n      accessTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n      idTokenGeneration: {\n        claimsToAddOrOverride: claimsToAdd,\n      },\n    };\n  } catch {\n    // Do not fail token issuance; return event unchanged.\n    console.warn(\"Event is missing tenant or workspace ID...\");\n  }\n  return event;\n};\n"],"mappings":";;;AAOA,IAAM,gBAAgB;AAAA,EACpB,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AACb;AASO,IAAM,UAA4C,OACvD,OACA,aAC4C;AAC5C,UAAQ,MAAM,aAAa,KAAK,EAAE;AAClC,MAAI;AACF,QAAI,CAAC,MAAM,UAAU;AACnB,MAAC,MAAgD,WAAW,CAAC;AAAA,IAC/D;AACA,UAAM,WAAW,MAAM;AACvB,UAAM,cAAc,EAAE,GAAG,cAAc;AACvC,aAAS,gCAAgC;AAAA,MACvC,uBAAuB;AAAA,QACrB,uBAAuB;AAAA,MACzB;AAAA,MACA,mBAAmB;AAAA,QACjB,uBAAuB;AAAA,MACzB;AAAA,IACF;AAAA,EACF,QAAQ;AAEN,YAAQ,KAAK,4CAA4C;AAAA,EAC3D;AACA,SAAO;AACT;","names":[]}

package/lib/rest-api-lambda.handler.js

@@ -58,12 +58,7 @@ function normalizeJsonBodyMiddleware(req, _res, next) {
 
 // src/data/middleware/open-hi-context.ts
 var import_serverless_express = require("@codegenie/serverless-express");
-var REQUIRED_CLAIMS = [
-  "openhi_tenant_id",
-  "openhi_workspace_id",
-  "openhi_user_id",
-  "openhi_user_name"
-];
+var REQUIRED_CLAIMS = ["ohi_tid", "ohi_wid", "ohi_uid", "ohi_uname"];
 function getJwtClaims(req) {
   const invoke = (0, import_serverless_express.getCurrentInvoke)();
   const event = invoke?.event ?? req.apiGateway?.event;
@@ -88,11 +83,11 @@ function openHiContextMiddleware(req, res, next) {
   const event = invoke?.event ?? req.apiGateway?.event;
   const requestId = typeof event?.requestContext?.requestId === "string" ? event.requestContext.requestId : void 0;
   req.openhiContext = {
-    tenantId: claims.openhi_tenant_id,
-    workspaceId: claims.openhi_workspace_id,
+    tenantId: claims.ohi_tid,
+    workspaceId: claims.ohi_wid,
     date: (/* @__PURE__ */ new Date()).toISOString(),
-    actorId: claims.openhi_user_id,
-    actorName: claims.openhi_user_name,
+    actorId: claims.ohi_uid,
+    actorName: claims.ohi_uname,
     actorType: "human",
     roleId: typeof claims.openhi_role_id === "string" && claims.openhi_role_id !== "" ? claims.openhi_role_id : void 0,
     requestId,